sup3r-b0y Goto Github PK

aem-hacker

afrog

A Vulnerability Scanning Tools For Penetration Testing

android_frida_scripts

awesome-asset-discovery

List of Awesome Asset Discovery Resources

awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

awesome-waf

🔥 A curated list of awesome web-application firewall (WAF) stuff.

aws_pwn

A collection of AWS penetration testing junk

bosch_headunit_root

Documentation and code for rooting and extending a Bosch car head unit (lcn2kai)

cicd-pipeline-train-schedule-git

Train Schedule sample app for Git exercises

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

dnsreaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

dp_crypto

Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)

enumerate-iam

Enumerate the permissions associated with AWS credential set

extract-url-from-js

fuzzingtool

Software for fuzzing, used on web application pentestings.

gda-android-reversing-tool

GDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

gmapsapiscanner

jaeles

The Swiss Army knife for automated Web Application Testing

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

lazyrecon

An automated approach to performing recon for bug bounty hunting and penetration testing.

malicious-pdf

Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator

mobi

notes

palera1n

iOS 15.0-16.4.1 semi-tethered checkm8 jailbreak

parameter-reflect-finder

Parameter-Reflect-Finder is a python based tool that helps you find reflected parameters which can have potential XSS or Open redirection vulnerabilities.

payloads

Git All the Payloads! A collection of web attack payloads.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

reflection-public

reverse-shell

Reverse Shell as a Service

scripts

Utils